Privacy Policy

Effective Date: March 25, 2026 | Last Updated: March 25, 2026

This Privacy Policy describes how imdigitalagent ("we," "us," or "our") collects, uses, and protects information when you use our AI-powered social media management services. By using our Services, you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly, including your name, email address, business name, and social media OAuth access tokens (never passwords). We also collect usage data, device information, and analytics data automatically when you use our platform.

When you connect social media accounts, we receive data from those platforms via their official APIs as authorized by you. This includes account data, post performance metrics, and message data from Instagram, Facebook, TikTok, YouTube, LinkedIn, X, WhatsApp, Pinterest, Telegram, Reddit, Threads, Snapchat, Google Business, and Bluesky.

2. How We Use Your Information

To operate and provide our AI social media management services
To generate and publish content on your connected accounts
To manage DMs, bookings, leads, and analytics on your behalf
To send service notifications, reports, and billing information
To detect and prevent fraud and security issues
To improve our platform and services

We do not sell your personal information or your clients' information to any third parties.

3. Data Sharing

We share data only with: (1) social media platforms to publish your content via their APIs; (2) service providers including Anthropic (AI), Ideogram (images), Cloudflare (storage/CDN), Stripe (payments), Twilio (SMS/phone), and SendGrid (email); and (3) legal authorities when required by law. All service providers are contractually bound to protect your data.

4. Data Security

We use TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, and client-isolated database namespaces. In the event of a breach, we will notify affected users within 72 hours.

5. Data Retention

Account data is retained while active and for 90 days after termination. Social media tokens are deleted immediately upon account disconnection. Payment records are retained for 7 years as required by law. You may request deletion at any time at privacy@imdigitalagent.com.

6. Your Rights

You have the right to access, correct, delete, and port your personal data. You may disconnect any social media account at any time through your dashboard. California residents have additional rights under CCPA. EU/UK residents have rights under GDPR including the right to lodge a complaint with your local data protection authority.

7. Platform-Specific Disclosures

Our use of Meta APIs (Instagram, Facebook, Threads, WhatsApp) complies with Meta's Platform Terms and Developer Data Use Policy. Our use of TikTok's API complies with TikTok's Developer Terms of Service. Our use of YouTube APIs complies with Google's API Terms of Service. We only request minimum necessary permissions from each platform.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We will notify you of material changes via email and dashboard notification. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy questions or to exercise your rights:
Email: privacy@imdigitalagent.com
General: hello@imdigitalagent.com
Website: imdigitalagent.com
Orlando, FL, United States